Third Party Risk Manager

At VCCU, we are proud of the work we do to improve the financial well-being of our members and our community. If you seek meaningful work building stronger financial futures and aspire to create a positive difference in your community, wed love to hear from you! About The Role The Third Party Risk Manager is responsible for administering and continuously enhancing Ventura County Credit Unions Third Party Risk Management and Vendor Management Program. This position provides centralized oversight of third-party relationships throughout the vendor lifecycle, with primary responsibility for vendor onboarding and termination, vendor due diligence, vendor risk assessments, risk classification, ongoing monitoring, issue remediation oversight, and vendor risk reporting. Working in partnership with Vendor Owners and subject-matter experts across VCCU, the Third Party Risk Manager evaluates third-party risks and provides effective risk oversight and challenge to ensure vendor owners manage relationships consistent with VCCUs risk appetite, policies, regulatory requirements, and business objectives. This is a key member of the Enterprise Risk team and requires onsite work at VCCUs Ventura Headquarters. What Youll Do Third Party Risk Management: Administration and oversight of VCCUs Third Party Risk Management framework, including enhancements to policies, procedures, risk methodologies, questionnaires, workflows, documentation standards, and the administration of the centralized vendor management system.Vendor Risk Assessments: Lead and facilitate risk assessments for new and existing third-party relationships, evaluating applicable operational, financial, information security, cybersecurity, compliance, regulatory, strategic, reputation, resilience, concentration, and third- and fourth-party risks.Vendor Due Diligence: Coordinate and perform risk-based due diligence appropriate to each vendors services, criticality, information access, operational dependency, and assigned risk classification. Review applicable financial, security, compliance, insurance, business continuity, control, and other supporting documentation.Risk Classification & Onboarding: Evaluate new vendor relationships, assign or recommend appropriate risk classifications, determine required due diligence, and verify completion of applicable risk requirements prior to onboarding.Ongoing Monitoring: Establish and coordinate risk-based periodic vendor reviews; monitor completion of due diligence, risk assessments, certifications, documentation, and remediation activities; and reassess vendor risk when material changes occur.Issue Management: Identify and document vendor control gaps, documentation deficiencies, exceptions, and risks; coordinate with Vendor Owners and stakeholders to establish corrective action plans; monitor remediation progress; and escalate significant or unresolved risks in accordance with VCCU's established procedures..Contract Risk Review: Review third-party contracts from a risk perspective, including provisions related to information security, privacy, confidentiality, business continuity, incident notification, audit rights, subcontractors, service levels, termination, data disposition, regulatory requirements, and emerging technology risks such as artificial intelligence.Vendor Governance & Reporting: Maintain accurate vendor risk records and provide management reporting on significant vendor risks, overdue reviews, outstanding assessments, documentation exceptions, remediation activities, and emerging third-party risks.Regulatory & Emerging Risk: Monitor relevant regulatory guidance, cybersecurity developments, financial-services practices, and emerging risks and recommend appropriate enhancements to VCCUs Third Party Risk Management Program. What Were Seeking Minimum 5 years' of progressive experience in third-party/vendor risk management, enterprise risk management, compliance, information security risk, internal audit, or financial-services risk management.Must have familiarity with Vendor Risk Assessments and vendor due diligence.Requires working knowledge of cybersecurity, business continuity, operational resilience, regulatory compliance, financial risk, and third-party risk concepts.Bachelor's degree in Business Administration, Risk Management, Finance, Information Systems, Cybersecurity, a related field, or equivalent relevant experience. What Will Make You Stand Out Strong analytical and project-management skills with the ability to identify risk, evaluate controls, document conclusions, and communicate matters requiring remediation or escalation.Experience with GRC platforms (i.e. NContracts, Quantivate, Tandem, etc.). Relevant professional certifications such as CTPRP, CRVPM, CISA, CISM, or comparable risk credentials.Driven by purpose, with a genuine commitment to the Credit Union philosophy of people helping people. Whats In It For You VCCU is an Equal Pay Champion and we offer a competitive total rewards package! Paid Volunteer TimePaid Time Off, including Sick/Vacation/HolidaysMedical/Dental/Vision/Supplemental Benefits 401k Employer Match & Safe Harbor Contribution457b Retirement PlanCompany Sponsored Life & LTD InsuranceCell Phone ReimbursementEducation ReimbursementVCCU Membership and Rate Discounts We are dedicated to building an inclusive and authentic workplace that values unique voices and experiences, backgrounds and identities. We are an equal opportunity employer who celebrates the diversity of our employees and our members and strives to represent the many communities we serve.